Privacy Fine Tracker

Automated tracking of privacy enforcement actions worldwide. Data is collected from GDPR enforcement authorities, the FTC, state data broker registries, and privacy news sources.

Total Fines

698

Total Amount (USD)

$7.9B

Registered Data Brokers

1,000

Regulations

6

Fines by Country

Search by Country →
CountryTotal (USD)Fines
Ireland$5.3B37
France$1.2B268
Luxembourg$805.7M1
Netherlands$313.5M2
United Kingdom$164.7M350
Germany$48.6M1
Italy$21.6M2
Poland$15.9M3
US$5.4M3

Recent Fines

View All →
DateCompanyRegulationAuthorityAmount (USD)
--Superior Style Home Improvements LtdPECRUK ICO--
--Just Hype LtdPECRUK ICO--
2026-08-27Cox Media GroupFTC Act Section 5FTC$880,000
2026-07-29Hims & HersFTC Act Section 5FTC--
2026-07-09RentGrowOtherFTC$2,250,000
2026-06-30AmazonOtherFTC$2,250,000
2026-06-10Midlands Regional Hospital TullamoreGDPRIreland DPC$344,827.59
2026-05-01IQVIA Operations FRGDPRFrance CNIL$5,400,000
2026-05-01South Staffs WaterGDPRUK ICO$1,270,000
2026-04-30Permanent TSBGDPRIreland DPC$318,965.52
2026-04-02SOCIÉTÉ EXPLOITANT DES BOUTIQUES TOILETTES (procédure simplifiée)GDPRFrance CNIL$8,620.69
2026-03-26SOCIÉTÉ ORGANISANT DES ÉVÈNEMENTS PAR LA PROMOTION ET LA VENTE DE BILLETS (procédure simplifiée)French ePrivacy rules (cookies)France CNIL$17,626.32
2026-03-26SOCIÉTÉ AYANT POUR ACTIVITÉ L'HÉBERGEMENT DE TOURISME (procédure simplifiée)GDPRFrance CNIL$3,525.26
2026-03-12SOCIÉTÉ EXERÇANT UNE ACTIVITÉ DE VENTE À DISTANCE SUR CATALOGUE SPECIALISÉE (procédure simplifiée)GDPRFrance CNIL$5,875.44
2026-03-05ASSOCIATION AYANT POUR OBJET DE PROMOUVOIR L'ACCÈS AUX SOINS DENTAIRES DES PERSONNES DÉMUNIES (procédure simplifiée)GDPRFrance CNIL$7,050.53
2026-02-01NL Municipalities (x10)GDPRNetherlands AP$270,000
2026-01-29ÉTABLISSEMENT PUBLIC EXERÇANT UNE ACTIVITÉ DE TRANSPORT URBAIN (procédure simplifiée)GDPRFrance CNIL$23,501.76
2026-01-29ASSOCIATION RELIGIEUSE (procédure simplifiée)GDPRFrance CNIL$11,750.88
2026-01-22ÉTABLISSEMENT PUBLIC ADMINISTRATIFGDPRFrance CNIL$5,875,440.66
2026-01-15CANDIDATS AUX ÉLECTIONS LÉGISLATIVES (procédure simplifiée)GDPRFrance CNIL$2,350.18

Data Brokers by State

View All Brokers →

CA

904 registered

OR

96 registered

Recent Privacy Headlines

View All →
Ghostscript flaw lets hackers hijack servers via PDF uploads

BleepingComputer · 10/13/2026

A critical heap buffer overflow vulnerability (CVE-2026-39919) in the Ghostscript interpreter and rendering engine could allow remote code execution through specially crafted PDF files. [...]

breach
Attackers claim to have stolen 80 million South African patient records in massive Ampath Laboratories data breach

DataBreaches.net · 10/13/2026

Luis Monzon reports: Ampath Laboratories, one of South Africa’s largest pathology service providers, has been hit by a cyberattack, with the attacker claiming that more than 80 million patient records have been exfiltrated. Threat actor ByteToBreach, which has attacked other major entities across Africa, including major targets in Nigeria, claimed responsibility for the breach. The... Source

breach
French supermarkets face millions in losses after cyberattack hits refrigerators nationwide

Fox News Tech · 10/13/2026

Hackers targeted Danfoss refrigerator controls across French supermarkets, forcing chains like Carrefour and Monoprix to discard massive food stocks.

breach
TFG London cyberattack disrupts systems at Hobbs and Whistles retailers

BleepingComputer · 10/13/2026

TFG London detected a cybersecurity incident that impacted IT systems used by the Phase Eight, Hobbs, and Whistles premium fashion brands. [...]

breach
Sandbox vulnerability gives rogue AI agents a path to escape and leak data, research says

The Record · 10/13/2026

The new research, published by AI security startup AIR, found that a network filtering flaw in Vercel Sandbox — a tool used to run code in isolated environments — could allow agents to exploit certificate validation processes to transmit data outside approved networks.

breach
Meta Says Hackers Took Code, Personal Data of 1,500 in GitHub Breach

SecurityWeek · 10/13/2026

Most of the affected individuals are Meta employees in the United States and they are being offered credit monitoring services. The post Meta Says Hackers Took Code, Personal Data of 1,500 in GitHub Breach appeared first on SecurityWeek .

breach
North Korean hackers target Ukrainian experts for possible intelligence on Russia's war

The Record · 10/13/2026

North Korean hackers have been targeting Ukrainian experts in diplomacy, security and international policy amid Pyongyang’s growing military cooperation with Russia.

breach
UK: Commercial market research and data-gathering firm in the medical space leaked health data

DataBreaches.net · 10/13/2026

UpGuard provides another entry for our “No need to hack when it’s leaking” files. This time, it’s Liberating Research. On August 31, Greg Pollock from UpGuard contacted DataBreaches.net to report a data leak they discovered containing sensitive medical information on almost 100,000 people. By agreement, we both delayed publication to give the responsible firm time... Source

breach
ShinyHunters: Six Years of Cybercrime — Expert Analysis and Ransomware Group Perspectives

DataBreaches.net · 10/13/2026

Back in the day, when my co-author and I would conduct training workshops on neurobehavioral disorders in children and teens, we would always introduce our presentation with an overhead that said, “Two Professionals. Three Opinions.” That remains true for so many controversial or contentious topics. This week, Marco A. De Felice of SuspectFile tackled questions... Source

breach
EDPB publishes statement on the data protection challenges of smart glasses

EDPB News · 10/13/2026

Brussels, 13 October – During its latest plenary, the EDPB has adopted statement on smart glasses and published the report “The connected gaze. Video recording, surveillance and administering evidence in the age of smart glasses” *, developed in the context of the Support Pool of Expert (SPE) programme **. As smart glasses become widely available and more frequently used, they raise significant questions for the protection of individuals’ personal data and rights and freedoms even if they create new opportunities for communication, assistance, and innovation. “These devices look like ordinary glasses, but they include cameras and microphones and are connected to the internet. This raises serious privacy concerns, as individuals may be recorded without their knowledge. The risks are even greater in sensitive environments—such as hospitals, schools, or workplaces—and when recordings are shared on social networks. And of course, children are especially at risk when using these glasses or

regulation